pluralsights

Question 1

When you create a role assignment in the Azure CLI, what 3 components do you need?

Answer 1

1. the role definition
2. the assignee
3. the scope of the assignment. If you don’t provide a scope, it will default to the entire subscription.

Question 2

In Azure CLI, what’s the command to assign the “reader” scope to the “developer” security group?
(Create Role Assignment in CLI)

Answer 2

assign the role and specify a resource group scope.
az role assignment create –role “Reader” –assignee $developers_security_group –scope /subscriptions/xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxx/resourceGroups/my-web-app

Question 3

In Azure CLI, what’s the command to define your own role (eg “Custom Data”), and assign it to an app or group?
(Create Role Definitions in CLI)

Answer 3

az role definition create –role-definition ‘{
“Name”: “Custom Data”, […]
}

assign the new custom role to an app or group
az role assignment create –role “Custom Data” –assignee $developers_security_group

Question 4

What’s Azure API Management?

Answer 4

Azure service to create consistent and modern API gateways for existing back-end services.
Provides secure, scalable API access for your app.

Question 5

What are the 3 components in Azure API Management?

Answer 5

1. API gateway; accepts API calls and routes them to your backends
2. Azure portal; the admin interface where you set up your API program
3. Developer portal; web user interface for developers where they can read API documentation.

Question 6

What’s the capabilities of Azure Portal?

Answer 6

1. Define/Import API schema
2. Set up policies like quotas or transformations on the APIs
3. Package APIs into products
4. Manage users

Question 7

What are the Access Restriction Policies in API Management?

Answer 7

1. Limit call rate by key
2. Validate JWT Tokens; enforces existence and validity of a JWT token in header or query parameter
3. Set usage quota by key; Enforces a renewable or lifetime call volume and/or bandwidth quota.
4. Check HTTP header presence; enforces existence and/or value of a HTTP header
5. Limit call rate by subscription

Question 8

What’s the policy name to secure an API by requiring a JWT Token?

Answer 8

<validate-jwt header-name=”Authorization” require-expiration-time=”false” require-scheme=”Bearer” output-token-variable-name=”jwt”>

Question 9

Common use cases for Azure Cache for Redis?

Answer 9

1. User session storage for distributed apps
2. Database caching
3. Content caching
4. Distributed transactions
5. Message broker (sometimes, queue based system/ or sub/pb model)

Question 10

How to remove items from Azure Redis Cache?

Answer 10

1. Schedule Deletion (TTL - time to live)
2. Manual Deletion
3. Eviction; you’re not in control of deleting the items. But you’re in control of the Eviction policies.

Question 11

What are the Eviction policy options?

Answer 11

1. Default value = volatile-lru (least recently used) by TTL
2. allkeys-lru with and without TTL
3. Noeviction
4. Volatile-random: anything considered volatile, will be random removed
5. allkeys-random; anything in the cache will select at random and removed.
6. volatile-ttl; used the remaining ttl that are volatile and remove those based on the items with the shortest TTL remaining.

Question 12

What are the best practices for Azure Cache for Redis configuration ?

Answer 12

1. Set the maxmemory-reserved setting
2. Reuse client connections whenever possible
3. Utilise Redis pipelining
4. Store smaller values

Question 13

What’s the command to configure Web Server Logging to the Filesystem?

Answer 13

az webapp log config –name sampleWebApp –resource-group sampleResourceGroup –web-server-logging filesystem

Question 14

What’s the command to configure App Logging to Azure Blob Storage? (windows only)

Answer 14

az webapp log config –name sampleWebApp –resource-group sampleResourceGroup –application-logging azureblobstorage

Question 15

What’s the command to configure Container Logging to File System? (Linux only)

Answer 15

az webapp log config –name sampleWebApp –resource-group sampleResourceGroup –docker-container-logging filesystem

Question 16

What’s the command to look/tail logs from App Service app? and tail and filter?

Answer 16

az webapp log tail –name sampleWebApp –resource-group sampleResourceGroup

Tail and Filter logs
az webapp log tail –name sampleWebApp –resource-group sampleResourceGroup –filter Error

Question 17

What’s transient fault?

Answer 17

any fault that is likely self-correcting and is caused by temporary loss of connection/availability of a service that an app is dependent upon.

Question 18

How to deal with transient faults?

Answer 18

1. App should log transient fault
2. Retry strategy
3. Implement architectural pattern that help with transient faults ( retry pattern, circuit breaker pattern)

Question 19

What is this Docker Environment Variable for App Service WEBSITES_CONTAINER_START_TIME_LIMIT?

Answer 19

Set the amount of time the platform will wait before it restarts your container

Question 20

What is this Docker Environment Variable for App Service WEBSITES_ENABLE_APP_SERVICE_STORAGE?

Answer 20

If value not set or set to true, the /home directory will be shared across container instances and files will persist.

Question 21

What is this Docker Environment Variable for App Service WEBSITES_WEBDEPOY_USE_SCM?

Answer 21

set to false if you want to deploy your container-based web application using WebDeploy/MSDeploy

Question 22

What’s Azure AD App Manifest?

Answer 22

The definition of an application object within the Microsoft Identity platform which includes all configuration for allowed authentication and authorization integration.

Question 23

When should you choose Azure Kubernetes Service (AKS) instead of Azure Container Instances (ACI)?

Answer 23

when you need service discovery across multiple containers, coordinated application upgrades and automatic scaling